$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ece0e23b-b608-3d3c-9882-e3d262f9c738.roa File: ece0e23b-b608-3d3c-9882-e3d262f9c738.roa (raw, json) Hash identifier: pWXz0OkJ5kWEdwvl21o5OS1ZD1V4YZ8C0U1FmAn++fE= Subject key identifier: F2:8D:62:F8:72:35:BE:82:4B:8C:A6:F0:0B:5A:0D:07:3E:E7:C4:1B Certificate issuer: /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Certificate serial: 010D0C9F4328584B9E07A914C47E776DF59EF300 Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ece0e23b-b608-3d3c-9882-e3d262f9c738.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 29992 IP address blocks: 152.128.0.0/14 maxlen: 24 152.132.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a9:14:c4:7e:77:6d:f5:9e:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a6d5b7e5-eb94-45c8-b01a-8999dd856fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:59:88:97:e3:41:9a:0c:d0:13:49:42:a8: 33:64:76:e3:b1:35:0d:b2:44:79:69:aa:75:79:32: cb:26:4f:fc:08:5e:b5:6f:1d:24:66:31:21:6d:3d: 7d:c8:36:b1:d9:06:26:e8:f9:63:14:c7:40:a6:43: 6b:e5:5e:97:33:9a:01:40:5e:6e:2c:13:64:e9:45: b2:e7:33:3f:36:60:9e:43:6b:3e:62:d2:40:a8:bd: 88:85:a2:ce:0d:30:8e:6a:0d:3d:4f:cc:94:93:5f: eb:6a:af:5a:f1:a3:7d:cb:c4:e5:8e:15:27:e6:1c: a6:31:8a:15:64:14:5d:bf:15:e0:b1:3a:fc:4d:f8: 68:1d:2a:1f:3e:90:e1:2d:4b:e4:89:99:f9:b2:79: fd:ab:20:3b:21:e6:a1:c9:7c:40:d7:38:bf:fc:11: 7b:f2:55:13:f9:4d:e8:0e:6b:4e:55:22:bd:c4:73: 02:64:34:11:f6:e7:37:b9:3a:94:05:2f:c3:23:71: 30:d3:65:17:ca:30:4f:b3:5e:1b:6b:1a:c5:86:53: e4:1b:d7:62:67:59:a4:88:2a:97:69:8d:35:7a:9f: 30:97:41:23:4e:ca:f4:33:dd:f2:a9:5e:14:5e:32: d5:14:aa:c8:8c:a8:9e:3d:ad:2f:96:34:0c:4f:4b: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8D:62:F8:72:35:BE:82:4B:8C:A6:F0:0B:5A:0D:07:3E:E7:C4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ece0e23b-b608-3d3c-9882-e3d262f9c738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl X509v3 Authority Key Identifier: keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer sbgp-ipAddrBlock: critical IPv4: 152.128.0.0-152.133.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0b:ac:5d:77:54:3f:2b:ae:c3:a7:27:e6:a9:37:fd:91:1f: b9:d6:e9:49:f4:6b:c0:d0:8b:c2:4a:b4:77:0d:39:86:1e:92: 04:02:66:f6:5f:58:f2:23:a0:6c:c3:c3:b5:aa:aa:46:86:63: df:5d:bc:d4:0a:a2:77:bd:b0:d2:1b:a9:2f:18:a1:c5:dc:7c: d3:10:c9:d1:3b:22:e1:a0:c7:32:46:c6:01:bf:9f:f5:f5:58: 23:5e:05:2c:f7:89:aa:29:7e:c7:35:88:88:bc:70:8b:86:de: df:2c:5b:47:b6:b8:a4:c2:7e:ca:50:a0:8b:1a:24:87:14:b6: fc:67:c2:c1:26:82:07:d1:03:30:66:55:62:ea:a2:aa:12:e9: cc:c6:29:ff:a6:28:d0:a3:1e:1b:2b:9b:5a:e7:da:0c:83:88: 26:df:77:5d:bc:52:c0:56:cb:34:cb:37:35:ba:b3:21:6f:ac: 7d:49:e0:9e:a4:a8:8c:f7:7a:99:01:fc:b5:e7:11:54:b6:15: 86:6d:f2:d8:80:09:3f:b6:30:9d:aa:de:e7:30:0b:b5:4b:e2: 39:3c:11:d6:b6:ba:e6:6a:6d:e2:d0:a2:1b:9e:e8:4e:f2:35: 54:1e:b1:e5:92:d1:3b:72:88:88:db:52:30:4e:40:de:77:28: 27:cd:04:62 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEueB6kUxH53bfWe8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk MDkyMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTZkNWI3ZTUtZWI5NC00NWM4LWIwMWEtODk5OWRkODU2ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGlZiJfjQZoM0BNJQqgzZHbjsTUNskR5aap1 eTLLJk/8CF61bx0kZjEhbT19yDax2QYm6PljFMdApkNr5V6XM5oBQF5uLBNk6UWy 5zM/NmCeQ2s+YtJAqL2IhaLODTCOag09T8yUk1/raq9a8aN9y8TljhUn5hymMYoV ZBRdvxXgsTr8TfhoHSofPpDhLUvkiZn5snn9qyA7IeahyXxA1zi//BF78lUT+U3o DmtOVSK9xHMCZDQR9uc3uTqUBS/DI3Ew02UXyjBPs14baxrFhlPkG9diZ1mkiCqX aY01ep8wl0EjTsr0M93yqV4UXjLVFKrIjKiePa0vljQMT0vdZwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPKNYvhyNb6CS4ym8AtaDQc+58QbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvZWNlMGUyM2ItYjYwOC0z ZDNjLTk4ODItZTNkMjYyZjljNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm Y2IyYWQwOTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAweYgAMD AZiEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHYLrF13VD8rrsOnJ+apN/2RH7nW6Un0a8DQi8JKtHcNOYYe kgQCZvZfWPIjoGzDw7WqqkaGY99dvNQKone9sNIbqS8YocXcfNMQydE7IuGgxzJG xgG/n/X1WCNeBSz3iaopfsc1iIi8cIuG3t8sW0e2uKTCfspQoIsaJIcUtvxnwsEm ggfRAzBmVWLqoqoS6czGKf+mKNCjHhsrm1rn2gyDiCbfd128UsBWyzTLNzW6syFv rH1J4J6kqIz3epkB/LXnEVS2FYZt8tiACT+2MJ2q3ucwC7VL4jk8Eda2uuZqbeLQ ohue6E7yNVQeseWS0TtyiIjbUjBOQN53KCfNBGI= -----END CERTIFICATE-----Generated at Mon Nov 3 14:47:54 2025 by rpki-client